Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3133302e302f32332d3233203d3e20323732323238.roa
File:                     3138392e3132362e3133302e302f32332d3233203d3e20323732323238.roa (raw, json)
Hash identifier:          Y9zbxd7k2ONdvp8TVmVImqRR+X5D3RWRWxh3/se+2W0=
Subject key identifier:   EF:F2:D1:BB:C8:51:79:C1:4F:35:B3:7A:E6:31:7B:E7:D0:D8:FC:5D
Certificate issuer:       /CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
Certificate serial:       2C1E02E107694C1CE1F4F75388E7042209C03C68
Authority key identifier: 8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3133302e302f32332d3233203d3e20323732323238.roa
Signing time:             Thu 04 Apr 2024 11:16:18 +0000
ROA not before:           Thu 04 Apr 2024 11:11:18 +0000
ROA not after:            Thu 03 Apr 2025 11:16:18 +0000
asID:                     272228
IP address blocks:        189.126.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1e:02:e1:07:69:4c:1c:e1:f4:f7:53:88:e7:04:22:09:c0:3c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A6E605ED2BDD660443C6C16905FB728C0170E49
        Validity
            Not Before: Apr  4 11:11:18 2024 GMT
            Not After : Apr  3 11:16:18 2025 GMT
        Subject: CN=EFF2D1BBC85179C14F35B37AE6317BE7D0D8FC5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:3c:88:91:cf:21:dc:1d:c5:a4:f9:e6:ff:
                    6c:cb:2b:b7:6e:dc:fa:ab:be:ad:e4:71:19:ec:9a:
                    5f:91:6a:cf:b3:17:4e:e6:ab:1d:e9:29:c1:d5:7d:
                    1a:f2:1f:98:83:97:13:30:4f:e7:27:92:87:cb:a4:
                    d8:de:d7:a4:df:bb:a8:e6:d4:be:fc:c5:e2:70:79:
                    6e:5d:7c:d7:2f:64:d3:f0:d0:71:72:43:06:6c:1e:
                    84:cf:bb:4b:4b:aa:7f:36:f9:75:ce:0d:09:b4:56:
                    d4:34:e8:99:88:b5:db:6a:de:7d:74:4d:b7:19:95:
                    11:c7:ba:d8:d0:d2:ac:af:05:3b:e8:c0:29:55:04:
                    5d:5f:fe:80:55:52:e9:d8:3c:b7:6d:27:39:2b:c1:
                    a0:a5:05:b6:7f:46:48:2b:f6:49:1e:5b:e8:36:38:
                    9b:d3:bf:9a:fa:be:62:3d:8e:a2:8d:4b:ba:fc:b7:
                    03:c2:b6:db:ac:ff:de:3a:6f:68:ea:23:13:8d:78:
                    26:d0:c6:29:24:8c:9c:7e:b1:d2:24:12:62:77:79:
                    ad:75:23:1d:75:d9:4e:5f:92:2e:93:10:17:ad:9b:
                    41:d3:01:55:7a:6e:48:c8:7a:19:9f:2d:3a:77:e5:
                    b2:03:1a:00:57:ce:78:79:a8:b0:c6:5f:c6:28:0a:
                    1a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F2:D1:BB:C8:51:79:C1:4F:35:B3:7A:E6:31:7B:E7:D0:D8:FC:5D
            X509v3 Authority Key Identifier:
                keyid:8A:6E:60:5E:D2:BD:D6:60:44:3C:6C:16:90:5F:B7:28:C0:17:0E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A6E605ED2BDD660443C6C16905FB728C0170E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hD2jhvsg3muiP88cLzmWkvK2pTchzSeTicUGZNbNYAH/1/3138392e3132362e3133302e302f32332d3233203d3e20323732323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:2e:d6:a9:1d:db:a7:67:7b:91:f0:f9:70:25:d0:cd:d6:b0:
         9b:65:ab:50:7f:f8:54:10:da:6b:e5:08:78:63:34:b2:9b:d8:
         f5:22:09:ce:d6:ff:5a:69:d7:a9:d1:83:d6:c5:36:e3:d3:cd:
         e9:4c:05:37:f3:36:32:79:16:d0:6d:b8:e7:9c:d4:6c:ea:5d:
         bb:d0:67:03:b9:15:60:f0:2a:57:c2:37:16:29:b4:d3:cd:95:
         33:fd:1c:37:5a:87:32:f9:5c:1a:c3:7d:f7:05:12:15:de:ee:
         3b:ad:92:fe:c4:94:52:ca:5f:5f:2a:72:79:dc:c3:d9:76:39:
         14:97:86:4e:b5:8d:73:95:21:63:81:c1:7e:47:1a:51:51:f6:
         28:7a:0a:ba:3a:01:a1:94:0f:7c:5f:e1:93:9e:d1:c0:64:05:
         4b:88:0e:f8:1b:b2:e8:20:14:e7:53:d1:06:8c:3f:ef:f6:04:
         3e:af:37:6c:f3:12:f8:93:1e:6d:97:2e:a1:50:2e:34:0e:e9:
         d6:57:c1:96:31:2f:06:72:11:a4:fe:5b:96:90:62:b7:cb:9e:
         a3:cb:fb:6e:80:70:44:06:4b:3c:53:86:9e:d6:98:f1:15:7e:
         92:d0:09:8b:b6:c2:34:c0:80:8b:1e:92:2b:f9:0d:32:ff:53:
         de:80:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org